因工作需求,最近开始研究docker及k8s相关的资料,本文主要记录 kubernetes 安装过程及踩过的坑。坑是挺多，过来就好了！如有错漏，望予指正。

系统环境

CentOS 7.4

硬件环境

IP地址机器名称角色10.8.51.76server主节点10.8.51.77node-1从节点10.8.51.78node-2从节点

初始化环境

初始化环境之后,建议重新启动机器

修改主机名,建议统一

hostnamectl set-hostname server
hostnamectl set-hostname node-1
hostnamectl set-hostname node-2

修改/etc/hosts 文件添加主机映射

#node-2 为当前节点的主机名称
127.0.0.1 localhost node-2 localhost4 localhost4.localdomain4
::1 localhost node-2 localhost6 localhost6.localdomain6
10.8.51.76 server
10.8.51.77 node-1
10.8.51.78 node-2

免身份认证(建议弄上,主要是方便)

ssh-keygen #一路回车就可
ssh-copy-id server
ssh-copy-id node-1
ssh-copy-id node-2

关闭防火墙、关闭Swap、关闭Selinux

#关闭防火墙
systemctl stop firewalld
systemctl disable firewalld
#关闭交换内存,必需关闭.不关容易出错
swapoff -a 
sed -i 's/.*swap.*/#&/' /etc/fstab
#关闭selinux 
setenforce 0 
sed -i "s/^SELINUX=enforcing/SELINUX=disabled/g" /etc/sysconfig/selinux 
sed -i "s/^SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config 
sed -i "s/^SELINUX=permissive/SELINUX=disabled/g" /etc/sysconfig/selinux 
sed -i "s/^SELINUX=permissive/SELINUX=disabled/g" /etc/selinux/config 
#更改文件最大打开数
echo "* soft nofile 65536" >> /etc/security/limits.conf
echo "* hard nofile 65536" >> /etc/security/limits.conf
echo "* soft nproc 65536" >> /etc/security/limits.conf
echo "* hard nproc 65536" >> /etc/security/limits.conf
echo "* soft memlock unlimited" >> /etc/security/limits.conf
echo "* hard memlock unlimited" >> /etc/security/limits.conf
#配置IP转发,充许
编辑 /etc/sysctl.d/k8s.conf 文件,添加
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
#完成后使其生效
sysctl -p /etc/sysctl.d/k8s.conf

Docker安装

Kubernetes 1.10.0 与期相附的docker版本，不指定版本会导致docker版本过高，k8s无法正常启动

#下载指定版本docker
wget https://download.docker.com/linux/centos/7/x86_64/stable/Packages/docker-ce-selinux-17.03.2.ce-1.el7.centos.noarch.rpm
wget https://download.docker.com/linux/centos/7/x86_64/stable/Packages/docker-ce-17.03.2.ce-1.el7.centos.x86_64.rpm
#安装
rpm -ivh docker-ce-selinux-17.03.2.ce-1.el7.centos.noarch.rpm
rpm -ivh docker-ce-17.03.2.ce-1.el7.centos.x86_64.rpm
#设置开机自启
systemctl enable docker
#启动docker
systemctl start docker
#查看状态
docker info 
#查看版本
docker version

此处可配置一下国内镜像加速

使用阿里云镜像加速器：阿里云容器hub https://dev.aliyun.com/search.html；登录之后，进入管理中心-->镜像加速器-->操作文档，根据提醒进行设置就可。 如下图: